summaryrefslogtreecommitdiffstats
path: root/doc/migration.rst
diff options
context:
space:
mode:
authorDaniel Salzman <daniel.salzman@nic.cz>2015-05-12 13:05:04 +0200
committerDaniel Salzman <daniel.salzman@nic.cz>2015-05-12 13:05:04 +0200
commit1a6f7db4ba43b653f084dd223ec53a5d192d9311 (patch)
treeeb51d5ca719d2c7c83558459596ff43c973c4637 /doc/migration.rst
parentmod-synthetic: rename zone to origin and address to network (diff)
downloadknot-1a6f7db4ba43b653f084dd223ec53a5d192d9311.tar.xz
knot-1a6f7db4ba43b653f084dd223ec53a5d192d9311.zip
conf: rename server.dnssec-keydir to server.kasp-db
Diffstat (limited to 'doc/migration.rst')
-rw-r--r--doc/migration.rst14
1 files changed, 7 insertions, 7 deletions
diff --git a/doc/migration.rst b/doc/migration.rst
index da0880575..47b6a04cf 100644
--- a/doc/migration.rst
+++ b/doc/migration.rst
@@ -23,21 +23,21 @@ generated by Bind.
example.com``.
Note: If dynamic updates (DDNS) are enabled for the given zone, you
- might need to freeze the zone before flushing it. That can be done
+ might need to freeze the zone before flushing it. That can be done
similarly: ``rndc freeze example.com``
2. Copy the fresh zone file into the zones storage directory of Knot
- DNS. It's default location is ``/var/lib/knot``.
+ DNS. It's default location is ``/var/lib/knot``.
3. We recommend to store DNSSEC keys for each zone in a separate
- directory. For this purpose, create a directory
- ``example.com.keys`` in zones storage directory. Then copy all
+ directory. For this purpose, create a directory
+ ``example.com.keys`` in zones storage directory. Then copy all
DNSSEC keys (``*.key`` and ``*.private``) from Bind key directory
(configured as ``key-directory``) into the newly created one.
-4. Add the zone into the Knot DNS configuration file. Zone
+4. Add the zone into the Knot DNS configuration file. Zone
configuration should contain at least specification of the zone
- file (option ``file``), key directory (option ``dnssec-keydir``),
+ file (option ``file``), key directory (option ``kasp-db``),
and enable automatic DNSSEC signing (option ``dnssec-enable``).
You can follow this example::
@@ -47,6 +47,6 @@ generated by Bind.
file: "example.com.db"
storage: "/var/lib/knot"
dnssec-enable: on
- dnssec-keydir: "example.com.keys"
+ kasp-db: "example.com.keys"
5. Start Knot DNS and check the log files to make sure that everything went right.